
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: RzKe/oRbAu+rYARU72LEeHCrw3zGUAgc9kh4eZiwwNw=
Subject key identifier: 0B:5C:F8:5F:AF:B7:D7:89:39:5C:61:72:FC:96:9F:89:E4:CC:2E:49
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: 012A
Signing time: Fri 25 Sep 2026 05:48:28 +0000
Manifest this update: Fri 25 Sep 2026 05:48:28 +0000
Manifest next update: Fri 02 Oct 2026 05:48:28 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: GI0XVEBRCZmJvmrtZgFlpzX9pMVM4dH7UbZzn2COCi0=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Sep 25 05:48:28 2026 GMT
Not After : Oct 2 05:48:28 2026 GMT
Subject: CN=6ab60b2c-28b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5f:b3:3a:ad:4a:2b:30:82:b9:38:f1:2c:78:
ac:47:70:89:bc:a3:10:bd:98:a4:3f:a1:08:5d:4e:
b8:0a:5c:0c:e7:68:5f:bb:14:23:95:24:06:26:c9:
cd:e5:9c:34:3c:0e:d7:37:33:4c:57:bb:bb:2c:6a:
07:c2:ef:c2:5d:70:26:59:10:90:c1:0a:fe:1a:1e:
c7:12:48:03:98:1b:96:ce:e2:79:de:ef:78:53:85:
8f:cf:b3:4b:0b:33:fa:e3:42:93:14:2e:ee:6f:89:
80:04:51:d1:4b:26:aa:eb:54:14:ae:92:54:fd:e7:
28:5d:dc:30:fe:3f:92:a9:7d:1e:ff:c8:1f:59:90:
8e:03:ec:9a:44:08:cf:ba:e2:92:e1:aa:70:45:c8:
71:a2:23:44:4c:d1:e3:9a:86:2f:31:e7:3e:f1:79:
2c:04:e1:6a:6d:66:6c:38:30:95:f7:a0:f7:36:bb:
87:c8:5c:94:b6:b0:c6:c4:45:28:11:56:93:c7:61:
69:74:2c:f0:c1:90:9b:65:b9:e1:8e:c5:6b:c7:a8:
d1:a7:62:e9:69:2d:cf:e7:b8:b2:c1:6a:bd:1a:fd:
91:05:29:b9:f1:d3:11:dd:0d:66:08:73:8d:4f:a1:
14:b4:27:f7:b3:10:f1:71:0a:bf:58:5c:66:80:31:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:F8:5F:AF:B7:D7:89:39:5C:61:72:FC:96:9F:89:E4:CC:2E:49
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ee:bf:fa:3b:a4:e4:7f:24:2e:f2:e1:c3:4d:09:d9:a0:53:
e6:8e:cb:b2:b2:94:c7:1b:a4:3e:fb:c2:e0:b4:17:88:a6:42:
cc:a6:d1:a3:d1:73:a8:15:f5:0d:4d:34:ac:75:f7:99:49:4f:
cc:a0:04:88:ac:67:2e:35:b3:62:76:54:e2:b8:cf:88:50:47:
6c:c1:56:27:c1:51:d3:f7:6c:01:b2:8e:e0:b9:83:34:0d:bb:
12:ae:c5:54:4f:f3:9a:46:80:9c:df:53:d7:51:de:05:f9:35:
61:5e:98:0f:d6:39:04:37:47:bf:3f:7c:2c:e9:8f:12:6e:65:
06:1c:e6:8c:e8:31:74:42:0c:bb:b1:3c:08:a3:a8:49:3b:6d:
a1:a7:45:ba:84:b1:f8:c9:60:89:58:11:bf:70:30:bc:63:71:
69:32:1c:f7:81:73:6f:d8:c0:88:fe:99:7c:9f:97:09:f9:57:
41:42:32:02:13:91:2a:f7:6e:b0:2a:f9:dc:7e:08:f2:04:f9:
63:67:fb:90:56:d3:1f:2d:ae:ce:4a:cb:12:34:45:5a:21:c6:
56:dd:68:7b:06:8f:13:15:11:71:7b:91:b2:55:55:25:84:65:
6c:2c:6a:e2:25:74:48:55:d8:bb:50:04:13:b6:de:47:ac:af:
ce:d1:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:40:20 2026 by rpki-client